7

CVSS Score

3.1

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2022-35937

CVE-2022-35937: TensorFlow vulnerable to OOB read in `Gather_nd` in TF Lite

Impact

The GatherNd function takes arguments that determine the sizes of inputs and outputs. If the inputs given are greater than or equal to the sizes of the outputs, an out-of-bounds memory read is triggered.

Patches

We have patched the issue in GitHub commit 595a65a3e224a0362d7e68c2213acfc2b499a196.

The fix will be included in TensorFlow 2.10.0. We will also cherrypick this commit on TensorFlow 2.9.1, TensorFlow 2.8.1, and TensorFlow 2.7.2, as these are also affected and still in supported range.

For more information

Please consult our security guide for more information regarding the security model and how to contact us with issues and questions.

Attribution

This vulnerability has been reported by Hui Peng from Baidu Security.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2022-35937

CVE-2022-35937:

7

CVSS Score

3.1

-

CVSS Score

Basic Information

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
tensorflow	pip	< 2.7.2	2.7.2
tensorflow	pip	>= 2.8.0, < 2.8.1	2.8.1
tensorflow	pip	>= 2.9.0, < 2.9.1	2.9.1
tensorflow-cpu	pip	< 2.7.2	2.7.2
tensorflow-cpu	pip	>= 2.8.0, < 2.8.1	2.8.1
tensorflow-cpu	pip	>= 2.9.0, < 2.9.1	2.9.1
tensorflow-gpu	pip	< 2.7.2	2.7.2
tensorflow-gpu	pip	>= 2.8.0, < 2.8.1	2.8.1
tensorflow-gpu	pip	>= 2.9.0, < 2.9.1	2.9.1

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability stems from two key issues:

In gather_nd.cc, the templated GatherNd function called reference_ops::GatherNd without checking its return status, proceeding even with invalid indices.
In reference_ops.h, the original GatherNd implementation didn't validate if calculated memory offsets (from_pos + slice_size) exceeded tensor dimensions. The patch added:
- int64_t from_pos type to prevent overflow
- Explicit bounds checks for from_pos validity
- Error return instead of unsafe memcpy These missing pre-patch validations directly enabled the OOB read vulnerability when indices contained values exceeding valid ranges.

Vulnerable functions

Only Mi**o us*rs **n s** t*is s**tion

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

7

-

Basic Information

Basic Information

Concerned about an active attack path?

CVE-2022-35937: TensorFlow vulnerable to OOB read in `Gather_nd` in TF Lite

Impact

Patches

For more information

Attribution

CVE-2022-35937:

7

-

Basic Information

Basic Information

Technical Details

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

Vulnerable functions

WAF Protection Rules

WAF Rule

Vulnerability Intelligence
Miggo AI

Detect and Respond To Threats Faster.

Technical Details

Basic Information

Basic Information

CVE-2022-35937: TensorFlow vulnerable to OOB read in `Gather_nd` in TF Lite

Impact

Patches

For more information

Attribution

7

7

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

Vulnerable functions

WAF Protection Rules

WAF Rule

Reasoning

7

-

Basic Information

Basic Information

Concerned about an active attack path?

CVE-2022-35937: TensorFlow vulnerable to OOB read in `Gather_nd` in TF Lite

Impact

Patches

For more information

Attribution

CVE-2022-35937:

7

-

Basic Information

Basic Information

Technical Details

Technical Details

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

WAF Protection Rules

WAF Rule

Vulnerability IntelligenceMiggo AI

Technical Details

Basic Information

Basic Information

CVE-2022-35937: TensorFlow vulnerable to OOB read in `Gather_nd` in TF Lite

Impact

Patches

For more information

Attribution

7

7

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

WAF Protection Rules

WAF Rule

Reasoning

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI